Is CVE-2021-25297 actively exploited?

Yes. CVE-2021-25297 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2021-25297 be exploited remotely?

The attack vector of CVE-2021-25297 has not been classified yet.

What is the CVSS score of CVE-2021-25297?

CVE-2021-25297 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2021-25297

HIGHCISA KEVIN THE WILD

CVE-2021-25297

Published: January 18, 2022

EPSS:59.84%probability of exploitation in 30 daysPercentile:98.2th

Official Description

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.

NVD Source

CISA KEV Advisory

Nagios XI OS Command Injection

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.

Added to KEV: 2022-01-18Federal patch deadline: 2022-02-01

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

Nagios XI contains a vulnerability that can lead to OS command injection on the Nagios XI server. The high EPSS score of 0.59840 and confirmed exploitation indicate this is a critical vulnerability that could lead to full system compromise.

This vulnerability is actively exploited in the wild and is listed in CISA's KEV catalog. The nature of the flaw suggests it could be remotely exploitable.

Recommended Action

Apply the latest security patches or updates for Nagios XI. Implement input validation and ensure proper sanitization of user-supplied data.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2021-25297 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2021-25297 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.